Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
File: AS395954.roa (raw, json)
Hash identifier: RvkMa+QahdR4ABU0YSRgIxv6oj4Yk46PRCCgZ1D+4n0=
Subject key identifier: 27:1C:D6:43:F3:9A:5E:51:BB:8B:FA:AB:AF:93:7D:E5:66:94:50:5B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 59F1768CD90A3CDF3B0720EA112F50A01416990A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
Signing time: Sat 19 Sep 2026 07:25:00 +0000
ROA not before: Sat 19 Sep 2026 07:20:00 +0000
ROA not after: Sat 18 Sep 2027 07:25:00 +0000
asID: 395954
IP address blocks: 191.96.37.0/24 maxlen: 24
191.96.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f1:76:8c:d9:0a:3c:df:3b:07:20:ea:11:2f:50:a0:14:16:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 19 07:20:00 2026 GMT
Not After : Sep 18 07:25:00 2027 GMT
Subject: CN=271CD643F39A5E51BB8BFAABAF937DE56694505B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:b1:61:42:25:de:fb:ad:ad:18:c1:16:1f:
c0:c8:24:65:39:11:5f:64:b6:99:b7:f1:ee:da:70:
78:07:93:5b:70:96:34:c6:d5:3e:4a:bc:c6:89:2d:
6b:96:4f:99:0b:02:8a:8d:6f:f0:93:f3:32:3c:e7:
07:63:4b:3e:f7:74:9b:d4:7d:a5:5a:69:b6:3d:17:
0c:24:53:b4:0a:7a:ea:73:f2:9d:b7:d9:5f:50:28:
51:57:aa:01:88:ee:aa:18:a1:ce:9c:a4:2a:18:99:
d5:d4:d5:72:74:b6:8c:ef:0b:9d:ba:a4:e6:32:7a:
bc:c2:6f:52:30:8e:11:f1:d0:5e:eb:fd:78:03:19:
fe:39:9a:29:1f:6a:fe:f7:2f:8e:8f:98:53:fa:e3:
ef:a7:4c:82:f5:03:7e:27:29:87:ac:d5:50:12:aa:
ac:55:8f:5e:3e:db:e6:c0:73:57:09:15:9f:94:9f:
d8:5f:8b:8e:e7:b8:79:49:a2:1b:66:12:cd:83:94:
b2:31:b7:41:ea:2c:e6:64:4a:0f:a0:89:fc:ac:3c:
d9:1a:82:6f:12:86:4d:37:7c:02:ab:a8:b5:30:55:
79:3a:50:d4:32:71:97:52:b8:a0:f4:2f:44:4b:ed:
5d:1c:e5:8a:0d:f7:03:62:36:d4:69:69:90:e8:51:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:D6:43:F3:9A:5E:51:BB:8B:FA:AB:AF:93:7D:E5:66:94:50:5B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.37.0/24
191.96.117.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b7:d0:87:0d:40:e5:e7:39:74:6b:60:e1:0e:63:c3:09:63:
d4:24:e1:27:92:ec:81:da:f9:38:ee:9b:cb:8c:dc:48:d2:c8:
ec:86:0a:ba:da:f3:0f:5c:64:57:e4:08:cd:78:87:b1:a2:c1:
79:48:4d:39:c7:7e:7b:1b:66:aa:cb:0d:0a:3a:2e:40:8a:b9:
14:3c:02:91:9e:aa:fc:af:5c:0b:9c:e4:d2:92:92:92:71:54:
99:8c:6d:b5:23:18:80:a9:3a:47:cd:ec:c1:80:88:83:9d:60:
df:d7:9d:2d:8a:d7:68:5f:5c:99:2d:1e:e1:55:bb:9c:28:86:
d8:9d:57:77:dd:92:90:57:92:7d:53:23:73:f5:a2:80:2d:f1:
b2:92:ac:6c:10:13:ac:8d:4e:b9:a2:c7:7b:b5:35:24:20:cf:
6a:ec:a7:cb:ef:da:25:05:7c:a5:32:eb:95:fd:55:17:d3:e7:
d8:07:a6:54:e6:f5:11:91:ff:45:4f:6a:98:38:69:01:bf:be:
b9:24:60:b7:07:c6:63:db:c7:2a:f2:3b:39:db:9f:61:b2:53:
f3:bc:85:05:ea:c0:4e:41:61:f6:f4:69:68:d5:a8:8b:08:1d:
52:11:d8:40:57:7e:65:99:b5:49:5c:3a:84:11:a2:cc:b2:07:
11:69:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:42:05 2026 by rpki-client